Copyright (C) 2005 James Grant This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, version 2. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; see the file COPYING. If not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */ ?> 0) $pl = user_load_($i['principal_uid']); else if($first != '' && $last != '') { $pl = user_create('principal', "*$first$last".user_generate_password()); $principal_update = "principal_uid='{$pl['uid']}',"; } else $pl = false; /* If we loaded or created an entry, either * update and save, or purge it */ if(is_array($pl)) { if($first == '' && $last == '') { user_purge($pl, 'principal'); $principal_update = 'principal_uid=NULL,'; } else { $pl['firstname'] = $first; $pl['lastname'] = $last; user_save($pl); } } /* Get info about science head */ list($first, $last) = explode(' ', $_POST['sciencehead'], 2); $em = $_POST['scienceheademail']; if($em == '' && ($first != '' || $last != '')) $em = "*$first$last".user_generate_password(); /* Load existing record, or create new if there's something * to insert */ $sh = false; if($i['sciencehead_uid'] > 0) { $sh = user_load($i['sciencehead_uid']); /* It's possile for sh to be false now, happens when the user is * deleted outside the school editor, this condition needs to be * fixed. If we let it go, the saving the teacher info will * silently fail. So let's just create a new teacher */ if(is_array($sh) && ($em != $sh['email'] || $em=='')) { /* If the emails don't match we have no way of knowing if we're creating a different * user, or doing a correction, assume it's a different user */ user_purge($sh, 'teacher'); $sh = false; } } /* If there was no teacher loaded, or if we just purged it, create a new one * if there's an email address */ if($sh == false && $em != '') { $sh = user_create('teacher', $em); $sciencehead_update = "sciencehead_uid='{$sh['uid']}',"; } /* If we have a record update it */ if(is_array($sh)) { $sh['firstname'] = $first; $sh['lastname'] = $last; $sh['phonework'] = $_POST['scienceheadphone']; $sh['email'] = $em; $sh['username'] = $em; user_save($sh); } $exec="UPDATE schools SET ". "school='".mysql_escape_string(stripslashes($_POST['school']))."', ". "schoollang='".mysql_escape_string(stripslashes($_POST['schoollang']))."', ". "designate='".mysql_escape_string(stripslashes($_POST['schooldesignate']))."', ". "schoollevel='".mysql_escape_string(stripslashes($_POST['schoollevel']))."', ". "school='".mysql_escape_string(stripslashes($_POST['school']))."', ". "board='".mysql_escape_string(stripslashes($_POST['board']))."', ". "district='".mysql_escape_string(stripslashes($_POST['district']))."', ". "address='".mysql_escape_string(stripslashes($_POST['address']))."', ". "city='".mysql_escape_string(stripslashes($_POST['city']))."', ". "province_code='".mysql_escape_string(stripslashes($_POST['province_code']))."', ". "postalcode='".mysql_escape_string(stripslashes($_POST['postalcode']))."', ". "schoolemail='".mysql_escape_string(stripslashes($_POST['schoolemail']))."', ". "phone='".mysql_escape_string(stripslashes($_POST['phone']))."', ". "fax='".mysql_escape_string(stripslashes($_POST['fax']))."', ". "registration_password='".mysql_escape_string(stripslashes($_POST['registration_password']))."', ". "projectlimit='".mysql_escape_string(stripslashes($_POST['projectlimit']))."', ". "projectlimitper='".mysql_escape_string(stripslashes($_POST['projectlimitper']))."', ". "accesscode='".mysql_escape_string(stripslashes($_POST['accesscode']))."', ". $sciencehead_update.$principal_update. "atrisk='$atrisk' ". "WHERE id='$id'"; mysql_query($exec); echo mysql_error(); if($_POST['save']=="add") $notice = 'added'; else $notice = 'saved'; } else if($_POST['action'] == "save_participation") { // update the schools' participation in fairs an olympics to reflect the settings submitted $olympicSet = array(); $fairSet = array(); foreach($_POST as $idx => $value){ if(preg_match('/_olympics$/', $idx)){ $parts = explode('_', $idx); $olympicSet[] = $parts[0]; }else if(preg_match('/_fairs$/', $idx)){ $parts = explode('_', $idx); $fairSet[] = $parts[0]; } } $fairString = '(' . implode(',', $fairSet) . ')'; $olympicString = '(' . implode(',', $olympicSet) . ')'; mysql_query("UPDATE schools SET include_fairs = TRUE WHERE id IN $fairString"); mysql_query("UPDATE schools SET include_fairs = FALSE WHERE id NOT IN $fairString"); mysql_query("UPDATE schools SET include_olympics = TRUE WHERE id IN $olympicString"); mysql_query("UPDATE schools SET include_olympics = FALSE WHERE id NOT IN $olympicString"); } else if($_POST['action']=="copy") { $oldConfId=intval($_POST['copyconference']); $newConfId=intval($conference['id']); if($oldConfId && $newConfId) { $q=mysql_query("SELECT * FROM schools WHERE conferences_id=$oldConfId"); while($r=mysql_fetch_object($q)) { $puid = ($r->principal_uid == null) ? 'NULL' : ("'".intval($r->principal_uid)."'"); $shuid = ($r->sciencehead_uid == null) ? 'NULL' : ("'".intval($r->sciencehead_uid)."'"); mysql_query("INSERT INTO schools (school,schoollang,schoollevel,board,district,phone,fax,address,city,province_code,postalcode,principal_uid,schoolemail,sciencehead_uid,accesscode,lastlogin,junior,intermediate,senior,registration_password,projectlimit,projectlimitper,conferences_id) VALUES ( '".mysql_real_escape_string($r->school)."', '".mysql_real_escape_string($r->schoollang)."', '".mysql_real_escape_string($r->schoollevel)."', '".mysql_real_escape_string($r->board)."', '".mysql_real_escape_string($r->district)."', '".mysql_real_escape_string($r->phone)."', '".mysql_real_escape_string($r->fax)."', '".mysql_real_escape_string($r->address)."', '".mysql_real_escape_string($r->city)."', '".mysql_real_escape_string($r->province_code)."', '".mysql_real_escape_string($r->postalcode)."',$puid, '".mysql_real_escape_string($r->schoolemail)."',$shuid, '".mysql_real_escape_string($r->accesscode)."', NULL, '".mysql_real_escape_string($r->junior)."', '".mysql_real_escape_string($r->intermediate)."', '".mysql_real_escape_string($r->senior)."', '".mysql_real_escape_string($r->registration_password)."', '".mysql_real_escape_string($r->projectlimit)."', '".mysql_real_escape_string($r->projectlimitper)."', '".mysql_real_escape_string($newConfId)."')"); } $notice="copied"; } } if($_GET['action']=="delete" && $_GET['delete']) { mysql_query("DELETE FROM schools WHERE id='".$_GET['delete']."'"); $notice = 'deleted'; } if($_GET['action']=="clearaccesscodes") { mysql_query("UPDATE schools SET accesscode=NULL WHERE conferences_id='{$conference['id']}'"); $notice = 'clearaccess'; } if($_GET['action']=="makeaccesscodes") { $q=mysql_query("SELECT id FROM schools WHERE conferences_id='{$conference['id']}' AND (accesscode IS NULL OR accesscode='')"); while($r=mysql_fetch_object($q)) { $ac=generatePassword(5); mysql_query("UPDATE schools SET accesscode='$ac' WHERE id='$r->id' AND conferences_id='{$conference['id']}'"); } $notice = 'makeaccess'; } if($_GET['action']=="edit" || $_GET['action']=="add") { send_header(($_GET['action']=='edit') ? "Edit School" : "Add New School", array('Committee Main' => 'committee_main.php', 'Administration' => 'admin/index.php', 'School Management' => 'admin/schools.php'), "schools_management" ); if($_GET['action']=="edit") { $buttontext="Save School"; $q=mysql_query("SELECT * FROM schools WHERE id='".$_GET['edit']."'"); $r=mysql_fetch_object($q); } else if($_GET['action']=="add") { $buttontext="Add School"; } $buttontext=i18n($buttontext); echo "
\n"; echo "\n"; if($_GET['action']=="edit") echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; echo "\n"; if($r->principal_uid > 0) $pl = user_load($r->principal_uid); else $pl = array(); echo "\n"; echo "\n"; echo "\n"; echo ""; if($r->sciencehead_uid > 0) $sh = user_load($r->sciencehead_uid); else $sh = array(); /* Don't show autogenerated emails */ $e = $sh['email'][0] == '*' ? '' : $sh['email']; echo "\n"; echo "\n"; echo "\n"; if($config['participant_registration_type']=="schoolpassword") { echo ""; echo "\n"; } echo ""; if($config['participant_registration_type']=="invite") { echo ""; echo "\n"; } else { echo ""; } echo ""; $ch = ($r->atrisk) == 'yes' ? 'checked="checked"' : ''; echo "\n"; echo ""; echo "\n"; echo "
".i18n("School Name")."school)."\" size=\"60\" maxlength=\"64\" />
".i18n("School Language").""; echo ""; echo "
".i18n("School Designation").""; $des = array('' => 'Choose', 'public' => 'Public', 'independent' => 'Independent/Private', 'home' => 'Home School'); echo "
".i18n("School Level")."schoollevel)."\" size=\"32\" maxlength=\"32\" />
".i18n("School Board")."board)."\" size=\"60\" maxlength=\"64\" />
".i18n("School District")."district)."\" size=\"60\" maxlength=\"64\" />
".i18n("Address")."address)."\" size=\"60\" maxlength=\"64\" />
".i18n("City")."city)."\" size=\"32\" maxlength=\"32\" />
".i18n($config['provincestate']).""; emit_province_selector("province_code",$r->province_code); echo "
".i18n($config['postalzip'])."postalcode\" size=\"8\" maxlength=\"7\" />
".i18n("Phone")."phone)."\" size=\"16\" maxlength=\"16\" />
".i18n("Fax")."fax)."\" size=\"16\" maxlength=\"16\" />
".i18n("Principal")."
".i18n("School Email")."schoolemail)."\" size=\"60\" maxlength=\"128\" />
".i18n("Access Code")."accesscode)."\" size=\"32\" maxlength=\"32\" />

".i18n("Science head/teacher or science fair contact at school")."
".i18n("Email")."
".i18n("Name")."
".i18n("Phone")."

".i18n("Participant Registration Password")."
".i18n("Password")."registration_password)."\" size=\"32\" maxlength=\"32\" />

".i18n("Participant Registration Limits")."
".i18n("Set to 0 to have no registration limit")."
".i18n("Maximum of")." "; echo "projectlimit)."\" size=\"4\" maxlength=\"4\" />"; echo " "; echo i18n("projects"); echo " "; echo ""; echo "
".i18n("Participant registration limits are currently disabled. In order to use participant registration limits for schools, the participant registration type must be set to 'invite' in Configuration / Configuration Variables")."

".i18n("Demographic Information")."
".i18n("Inner City or At-Risk school")."
 
\n"; echo "
\n"; } else if($_GET['action'] == 'participation') { send_header( "Conference Participation", array( 'Committee Main' => 'committee_main.php', 'Administration' => 'admin/index.php', 'School Management' => 'admin/schools.php' ), "participation" ); echo "
\n"; echo ""; echo ""; echo " "; echo " "; echo "\n"; $query = mysql_query("SELECT id, school, include_fairs, include_olympics FROM schools WHERE conferences_id='".$conference['id']."' ORDER BY school"); while($record = mysql_fetch_array($query)){ echo ""; echo ""; } echo "\n"; echo "
".i18n("School")."".i18n("Participation")."
" . $record['school'] . ""; echo ""; echo "
\n"; echo '' . "\n"; echo "
\n"; } else if($_GET['action']=="copy") { send_header("School Management", array('Committee Main' => 'committee_main.php', 'Administration' => 'admin/index.php'), "schools_management" ); echo "
"; echo "\n"; echo i18n("Choose a conference to copy schools from"); echo "
"; $q=mysql_query("SELECT * FROM conferences WHERE id!='{$conference['id']}' ORDER BY id DESC"); echo mysql_error(); echo "\n"; echo ""; echo "
\n"; } else { send_header("School Management", array('Committee Main' => 'committee_main.php', 'Administration' => 'admin/index.php'), "schools_management" ); switch($notice) { case 'added': echo happy(i18n("School successfully added")); break; case 'saved': echo happy(i18n("Successfully saved changes to school")); break; case 'deleted': echo happy(i18n("School successfully deleted")); break; case 'clearaccess': echo happy(i18n("Access Codes successfully cleared from all schools")); break; case 'makeaccess': echo happy(i18n("Access Codes successfully set for schools that didn't have one")); break; case 'copied': echo happy(i18n("Schools successfully copied from other conference")); break; } echo "
"; echo "".i18n("Add new school")."\n"; echo "
"; echo "".i18n("Copy schools from a difference conference")."\n"; echo "
"; echo "".i18n("Import schools from CSV")."\n"; echo "
"; echo "".i18n("Create Access Code for any school without one")."\n"; echo "
"; echo "".i18n("Remove Access Codes from all schools")."\n"; echo "
"; // we only need to see this option if we are managing both types of conferences $q = mysql_fetch_array(mysql_query('SELECT COUNT(DISTINCT(`type`)) as taly FROM conferences')); if($q['tally'] > 1){ echo "".i18n("Set SFIAB/SOIAB participation")."\n"; echo "
"; } echo ""; echo ""; echo " "; echo " "; echo " "; echo " "; if($config['participant_registration_type']=="schoolpassword") echo " "; echo " "; echo " "; echo "\n"; $q=mysql_query("SELECT * FROM schools WHERE conferences_id='".$conference['id']."' ORDER BY school"); while($r=mysql_fetch_object($q)) { echo "\n"; echo " \n"; echo " \n"; echo " \n"; $sciencehead = ''; if($r->sciencehead_uid > 0) { $sh = user_load($r->sciencehead_uid); $sciencehead = $sh['name']; } echo " \n"; if($config['participant_registration_type']=="schoolpassword") echo " \n"; echo " \n"; echo " \n"; echo "\n"; } echo "
".i18n("School")."".i18n("Address")."".i18n("Phone")."".i18n("Contact")."".i18n("Reg Pass")."".i18n("Access Code")."".i18n("Action")."
$r->school$r->address, $r->city, $r->postalcode$r->phone$sciencehead$r->registration_password$r->accesscode"; echo "id\">"; echo " "; echo "id\">"; echo "
\n"; } send_footer(); ?>